common/encrypt: support verifying ciphertext of v2 encryption policies